UBUNTU-CVE-2026-65108: Buffer Overflow

Published Nov 3, 2026

Updated

NVIDIA Slurm contains an attacker-controlled heap-based buffer overflow in the slurmstepd process while the slurmstepd is running with root permissions.

Affected Software

4 affected components

ubuntu/slurm-wlm*

Event History

Nov 3, 2026

CVE Published

via OSV·04:17 PM

Data Sourced

via OSV·04:17 PM

DescriptionSeverityAffected Software

Frequently Asked Questions

Who is realistically exposed to this issue?

Ubuntu systems using the slurm-wlm package are exposed where the slurmstepd process is running with root permissions. Exploitation is local, so remotely unauthenticated attackers are not indicated by the supplied data.

What level of access does an attacker need?

The attacker needs local access and low privileges. No user interaction is required, but the attack has high complexity.

What could a successful exploit achieve?

The supplied severity vector indicates high impact to confidentiality and integrity, with no availability impact indicated. Because the vulnerable slurmstepd process runs as root, successful exploitation could affect data and system integrity at that privilege level.

UBUNTU-CVE-2026-65108: Buffer Overflow

Affected Software

Event History

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What could a successful exploit achieve?

Company

Resources

Contact

Frequently Asked Questions

Who is realistically exposed to this issue?

What level of access does an attacker need?

What could a successful exploit achieve?